# Exec (/cli/exec)



The execution primitive. Use this when you need to actually *do* something with a connected credential — hit an API, run a script, exec a CLI tool.

* [`geni exec bash`](/cli/exec/bash) — run a bash command with one or more credentials' env vars available.

Secrets are injected into the subprocess at runtime and scrubbed from any output that flows back. The agent and the transcript never see plaintext.